Malicious code in nnabla-ext-cuda101-nccl2-ubuntu16 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70047d0a5eb542220386cc3c3f7f8bd4bee3faa63ce2124f363abcc1503be3df The OpenSSF Package Analysis project identified 'nnabla-ext-cuda101-nccl2-ubuntu16' @ 0.0.2 pypi as malicious. It is considered malicious becaus...

MAL-2023-8308 Malicious code in nnabla-ext-cuda101-nccl2-ubuntu16 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70047d0a5eb542220386cc3c3f7f8bd4bee3faa63ce2124f363abcc1503be3df The OpenSSF Package Analysis project identified 'nnabla-ext-cuda101-nccl2-ubuntu16' @ 0.0.2 pypi as malicious. It is considered malicious becaus...

Malicious Package

Overview nnabla-browser is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in nnabla-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75419bc1dee437b0f268284f42058c30387f7339a39f2474cd049fae3dc7f3c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4867 Malicious code in nnabla-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75419bc1dee437b0f268284f42058c30387f7339a39f2474cd049fae3dc7f3c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2019-20129

Name of the Vulnerable Software and Affected Versions Sony Neural Network Libraries nnabla versions prior to v1.0.15 Description The issue relies on the HOME environment variable, which might be untrusted, potentially leading to security concerns. Recommendations For versions prior to v1.0.15,...